US govt seeks Instructure testimony on massive Canvas cyberattack
2026-05-13T01:23:33Z•052b8e49311419fdcff1a2ac734d095ebcbd3412fda1479ffd71ebbd96e67f8f
canvascheckmarxdata-breachfortiauthenticatorfortinetfortisandboxinfostealerinstructurejenkinsmicrosoft-patch-tuesdaynpmprivacy-finepypisapshai-huludshinyhunterssupply-chainuk-ico
What happened
Collection of May 12, 2026 security stories: US House seeks testimony from Instructure after two ShinyHunters attacks on the Canvas LMS (Instructure later struck an agreement to halt leaks). Multiple large data breaches and fines reported (South Staffordshire Water fined £963,900; Škoda disclosed a shop hack; GM settled over drivers’ data). Supply-chain and developer-targeting incidents include the Shai-Hulud campaign compromising npm/PyPI packages and a malicious Checkmarx Jenkins plugin delivering an infostealer. Vendors released patches: Fortinet disclosed critical RCEs in FortiSandbox and
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 052b8e49311419fdcff1a2ac734d095ebcbd3412fda1479ffd71ebbd96e67f8f
- Enrichment time
- 2026-05-13T01:23:33Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.